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DIRECTOR OF CENTRAL INTELLIGENCE 

Security Committee 


SECOM-D- 324 


18 August 1980 


25X1 A 


MEMORANDUM FOR: Chairman, SECOM 

FROM: I I 

ES/ SECOM 

SUBJECT: Storage of APEX Nondisclosure Agreement 


25X1 A 
25X1 A 

25X1 A 


1. The issue of CIA providing a central repository for 
storage of the Nondisclosure Agreement has arisen again. 

2. The Department of State has acquiesced and it looks 
like there will be a standard APEX NdA. 


3. 


]is the CIA representative to one of 


| | APEX Working Groups chaired by C 

of the AF (also the AF SECOM member) . At a recent meeting 
everyone exc ept NS A a nd CIA opted for CIA to provide the 


repository . 


wants a statement of position, 


I ' ve repeatedly informed 


that OS would 

not be equipped to do this with current resources. But I 
haven t. ’ t told him how many resources it would take to make 
OS change its mind. 


25X1 A 


25X1 A 


5. As close as I can figure, we are talking about 
holding up to 200,000 NdA within the first two years of APEX 
and adding to this at the rate of probably 5-10,000 per month 
(on the high side), 3-5,000 per month on the low side. Original 
paper would have to be stored for 70 years. While there may 
not be active interplay of this material, there would be 
a need for an organized file subject to access and document 
retrieval on reasonable notice. 
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25X1 A 


6. Resource requirement for this 
be 2 people at the clerk level (GS-5 o 
year and one GS-6 full time each year 
requirements would be approximately 40 
year and an additional 2 or 3 linear p 
Before the first copy could be destroy 
initiation date) , the holdings will ha 
more than 300 linear feet of space. T 
unclassified but will require protect! 
weather hazards and effects of time. 


task are computed to 
r GS-6) for the first 
thereafter. Space 
linear feet the first 


er 

year the 

reafter . 

ed 

(70 year 

s from 

ve 

grown, to 

require 

he 

material 

is 

ve 

storage 

against 


7. | ~| continues to support the idea of 

central storage by CIA and I'm sure. he will again seek your 
support and agreement to provide this service of common 
concerTi . 


Shall we 
or 

Shall we 


encourage ? 
discourage? 



f 

25X1 A 


Distribution : 

Grig Return ES/SECOM 
1 - C/SECOM 
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15 August 1980 


MEMORANDUM FOR: 
25X1 A FROM: 

SUBJECT: 


Deputy Director of Security/CA 

Chief, Special Security Center 
APEX Nondisclosure Agreements 


25X1 A 
25X1 A 


25X1 A 


1. The attached agenda for the 14 August 1980 Working 
Group One meeting contains an item on the Nondisclosure 
Agreement which generated substantial discussion and disagree- 
ment, Most of the agencies represented were strongly in 
favor of a central repository for all Nondisclosure Agreements/ 1 ' 
opposed to burdening the individual SIO's with this responsi- 
bility for which they have no resources. 


2 . | 1 polled the attendees and found that all 

favored a central repository except NS A (which preferred to 
maintain its own Nondisclosure Agreements) and CIA, which 
abstained. I would appreciate a CIA position on a 

central repository for Nondisclosure Agreements -- the point 
being that all other agencies (except NSA) would like to see 
CIA accept this responsibility to which I could not commit 
either OS or CIA. 


3. I would appreciate guidance on this matter- -even in 
the form of a memo from I 1 -putting the Office on 

record as either accepting or declining to assume the role of 
Nondisclosure Agreement keeper for the community, and the 
concomitant resource impact such an acceptance would entail. 

The recent decision by National Archives that the Nondisclosure 
Agreement might have to be maintained for some seventy (70) 
years should also be considered. 


l 


£ 




25X1 A 


Approved For Release 2003/02/27 : CIA-RDP82M00591R000200050015-0 







Approved Foi^Belease 2003/02/27 : CIA-RDP82M00594«000200050015-0 


00 

01 

02 

03 

04 

25X1# 5 

0 6 

07 

08 

09 

10 
11 
12 

13 

14 

15 

16 
17 
10 

25X1 AL 9 
20 
21 
2 2 
23 


INSC 

APEX Nondisclosure Agreements ( NDAs ) 


Chairman, APEX Steering Group 
Room 7El 2 , CIA HQ Building 

1, During the 29 July 1980 meeting of the APEX Steering Group 
you tasked Working Group No 1 with preparing a draft letter to the 
NFIB SIOs on establishing repositories for the APEX Nondisclosure 
Agreements (NDAs) in their respective departments and agencies and 
specifying other related details. 

2. A draft of such a letter is attached for your consideration. 


| 1 Atch 

Chairman, APEX Working Group Draft ltr on APEX NDAs 

Number 1 
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DRA FT 

MEMORANDUM FOR NATIONAL FOREIGN INTELLIGENCE BOARD 
SUBJECT: APEX Nondisclosure Agreements ( NDAs } 

1. Subsequent to a nved-to-know certification and favorable 
DCir i/14 adjudication, all persons must undergo a security in- 
coodination and execute a Nondisclosure Agreement (NDA) as a 
condition of access to APEX material. Subsequent access to 
compartments within the APEX system will be accompanied by 
security indoctrinations that will include a reminder of the 
original NDA and its obligation. 

2. The NDAs will be distributed to the Intelligence Community 
in the near future together with instructions explaining its 
legal implications. Implementation of the APEX orientation pro- 
cess will then commence. 

3. As the NDA basically constitutes a legal, document reflecting 
the signer's willingness to adhere to its provisions as a condi- 
tion of access to APEX information, its preservation is a matter 
of vital concern for possible prosecution and other purposes. 

We have been unable to obtain agreement on the concept of retaining 
the NDAs in a central repository. Accordingly, each NFIB SIO 
must establish policies and procedures for the retention of NDAs 
completed by persons under his/her APEX security cognizance. 

4. The attached guidelines are provided to insure that the In- 
telligence Community has a uniform policy on the retention of 
APEX NDAs. 


25X1 A 


Attachment 
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GUIDELINES FOR RETENTION AND HANDLING OF THE 
APEX NON bis CLOSURE AGREEMENT ( N DA j 
AND RELATED ACTIONS 


1. NDA Repos i tor y. Intelligence Community SIOs are responsible to 
maintain a repository for all NDAs completed by persons authorized 
APEX access under their APEX security cognizance. The NDAs should 
be kept for 70 years or whatever period is subsequently prescribed 
by proper legal authority. NDAs should be maintained in such a 
format (e. g. , alphabetical by year) so as to be easily retrieved 
when required for legal or other purposes. The original signed 
copy of the NDA must be retained in the repository unless it is 
subsequently determined by proper legal authority that microfiche, 
xerox, or other forms of the original NDA are sufficient for pros- 
ecution purposes. Copies of the original NDA may be prepared and 
used elsewhere when needed for management, record keeping, or 
other purposes. 

2. Locat ion of the Repository. The logical site for the repository 
is in the Washington DC Metropolitan area — preferably in areas 
controlled by the Intelligence Community SIO. This would facilitate 
interplay with the "current access status" and "access history" 
functions of the Community-wide, Computer-assisted, Compartmentation 
Control ( 4C ) System to be established under APEX. 

3 * Hand! i ng of NDAs : 

a. I nit ial APEX Ind octrination. The original signed NDA should 
be forwarded to the Intelligence Community SIO who authorized APEX 
indoctrination. This SIO would be responsible for submitting re- 
quired data to the 4C system (or interim pre~4C system) and then 
retaining the NDA in its repository. IC SIOs may require a person 
to aperiodically complete additional NDAs for record-keeping, 
security, or other purposes. NDAs completed under these condi- 
tions need not be kept in the repository and may be destroyed 

when no longer needed. 

b . Record ing I ndividual APE X Access Categories. Each time a 
person is authorized access to an individual APEX compartment, 
subcompartment, product, or other APEX category, the fact will be 
reported to the SIO authorizing access who will enter the data in 
the 4C system. There is no need to record this access in the 
Intelligence Community SIO's NDA repository. 

c. De brie fings . When a person is debriefed in toto or is 
removed from one or more APEX accesses, the Debriefing Certificate 
(DC) must be forwarded to the SIO who authorized the access. This 
SIO will enter the data into the 4C system and keep or destroy the 
DC, as desired. The DC need not be retained in the repository. 
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d. Transfers Amon g In telligence Communit y SI Os, Whenever a 

person under the" 'APEX security cognizance of one Intelligence 

Community SIO is assigned (i. e. , "in-status transfer, or change 
of employment) to duties requiring APEX access under the cogni- 
zance of another Intelligence Community SIO, the person will be 
required to sign another NDA. This Ni)A will be retained and 
handled by the gaining Intelligence Community SIO as outlined in 
paragraphs 1 and 3a, above. This is to facilitate the processing 
of security reviews and other matters which might arise as the 
result of APEX access acquired as the result of duties with the 
gaining Intelligence Community SIO. 

e. APEX Access Subsequent to Debriefing . Whenever a person 
is debriefed in to to and is again subsequently authorized APEX 
access, another signed NDA must be accomplished and handled as 
outlined in paragraphs 1 and 3a, above. 
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APEX STEERING GROUP 
WORKING GROUP NUMBER ONE 


8 August 1980 


AGENDA 

Meeting, Thursday, 14 August 1980, 1000 Hours 
Room BD-951, Pentagon 


ITEM 1 Preliminary Comments 

ITEM 2 APEX Nondisclosure Agreement (NDA). (Please review 
the attached draft letter and be prepared to concur 
or provide alternate wording.) 

ITEM 3 APEX Briefing Guide. (Please review the attached 
draft letter and be prepared to concur or provide 
alternate wording.) 


ITEM 4 New business. 

25X1 A 


Chairman, APEX Working Group 
Number 1 


2 Atchs 

1. Draft ltr, APEX Non- 
disclosure Agreements (NDAs) 
w/Atch 

2. Draft ltr, APEX Briefing 
Guide w/Atch 


DISTRIBUTION: See reverse 
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DISTRIBUTION: 


25X1 A 



SAF/SS 

■rwv.:-! 4C-I000, 
Washington DC 

The Pentagon 
20330 

25X1A 



USASSG , OACSI , 
Room 2A-474 

The Pentagon 
Washington DC 

DA 

20310 

25X1 A 

1 


Department of 
INR/OIS/SB 
Room 6510A 
Washington DC 

State 

20520 

25X1 A 



25X1 A 

NS A/f 1 

Ft Meade MD 20755 

25X1 A 



Defense Intelligence Agency 
(RSS--4B), Room 2A-520 
The Pentagon 
Washington DC 20301 


I | Steering Group Staff 

Room 7E12. CIA HQ Bldg 



25X1 A 


Department of Justice 
Sp Scty Center, Room 6744 
10th and Pennsylvania Ave, N. W. 
Washington, DC 20530 


25X1 A 


Department of Energy 
Room GA-257 
Forrestal Building 
1000 Independence Ave 
Washington DC 20585 


25X1 A 
25X1A 


25X1 A 


Department of the Navy 
Room 5B-663, The Pentagon 
Washington DC 20350 
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00 I NSC 

01 

02 APEX Briefing Guide 

03 

04 

25X1 A 0 5 l I 

06 Chairman, APEX Steering Group 

07 Room 7E12, CIA HQ Building 
0 8 

09 1. You tasked Working Group No 1 with preparing a draft APEX 

10 Briefing Guide based on preliminary guides submitted by the SECOM 

11 ( SECGM-D-246 ) and the DIA member of our group (my ltr, 14 Jul 80). 
12 ' 

13 2. A draft of such a guide is attached for your consideration. 

14 It is predominantly a "checklist" type guide as the group believes 

15 this style would be more helpful to field activities. As noted in 

16 paragraph 2 of my. 14 July 1980 letter on this matter, APEX Program 

17 Managers must supplement the attached guide with secondary briefings 

18 on the various APEX compartments, subcompartments, and product 

19 categories under their cognizance. 

2 0 

2.1 
2 2 

25X1 A2 3 I I 1 Atch 

24 Chairman, APEX Working Group Draft APEX Briefing Guide 

25 Number 1 

26 
2 7 
28 
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0 0 _D R A_F_T 

0.1 
0 2 

0 3 APE X BRIEF ING_ GUIDE 

0 4 

05 

0 6 FO REWO RD 

07 

08 This guide is offered to assist personnel engaged in conduct- 

09 ing personnel security briefings on matters within the purview of 

10 the APEX Special Access Control System. 

11 

12 The guide has been prepared in "checklist" format so that brief- 

13 ing officers can extract from it, in part or in whole, elements that 

14 satisfy their unique requirements within full applicability of the 

15 need- to-know concept. 

16 

17 There are certain core concepts which must be incorporated in 

18 all briefings: 

19 

20 a. The individual must be told what he is to protect. 

21 

22 b. The individual must be told how he is expected to pro- 

23 tect the information and those procedures must be explained to him 

24 in understandable terms to his acknowledged satisfaction. 

2 5 

26 c. The individual must sign a Nondisclosure Agreement (NDA) 

27 and have explained to his satisfaction what the conditions of that 

28 agreement are. 

29 

30 No predetermined word pattern can be offered to satisfy all 

31 perceptions of needs in briefing personnel who are expected to 

32 protect material using the APEX Special Access Control System. 

33 But the core concepts must be incorporated into the briefing. 

34 

35 The guide does not include specifics of the various APEX opera- 

36 tional compartments, subcompartments, product compartments. Briefers 

37 must obtain this information from manuals and information dissemina- 

38 ted by the APEX Program Managers and provide it on a need-to-know 

39 basis to the individual being briefed. 

40 

41 It is recognized that persons who have been indoctrinated into 

42 former compar tmented intelligence programs will only require a mini- 

43 mum briefing to permit conversion to the APEX system. The briefing 

44 officer should adjust his briefing accordingly. 

4 5 

4 6 
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It is further recognized that there exist a number of 
personnel currently on' the periphery of the APEX system who 
historically have been incorporated under an umbrella concept 
of program compartmentation. The required tests for determina 
tion of what material may be afforded protection of the APEX 
Special Access Control System may result m a determination 
that some activities, and thus some personnel, are outside of 
APEX compartmentation. The inclusion of material or activi y, 
and thus personnel associated with this material or activity 
under APEX protection, does not mandate revelation of more in 
formation in the security briefing than is essential to do the 
io'o and help the individual recognize what it is he/she is to 
protect and how he/she is to accomplish this protection. 

General Officers and other " VIPs" should be given specialized 
briefings as their duties and responsibilities would not, for 
example, require detailed knowledge of "in-status" transfer 
procedures or how to wrap material for AR1COS delivery . 
sample outline on this type of APEX briefing is included. Sim- 
ilarly, a "Mini" Briefing is provided for those persons who re 
quire extremely limited knowledge about APEX. Both are examples 
of the type of "tailored" briefings that should oe developed 
by briefers for types of persons routinely briefed into APEX. 
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APEX BRIEFING GUIDE OUTLINE 


Introduc tio n (presented at uncla ss ified level): 

— General explanation of extreme sensitivity of the category of 
APEX information for which the person is being given access. 

-- Advisory that the person will be required to sign a contractual 
"Nondisclosure Agreement" (NDA) as a condition of access to APEX 
material. (Allow the person to read the NDA if appl icable/asked . ) 

~~ Highlight the NDA requirements for prepublication review and 
cover other matters as detailed in the legal instructional 
package on the NDA. 

Allow the individual to express any reservations which he/she 
may have concerning the NDA or access to APEX materials. (Such 
...nervations could, in some cases, result in terminating the 
briefing at this point until issues are resolved.) 


Subs ta ntive Briefing (c la s si f ied a ccord in y t o co n t e nt) : 

— Discuss need for, purpose of, and structure of the APEX Special 
Access Control System. (Use APEX Security Manual as source.) 

Discuss the APEX "chain of command" (e. g., President, I)CI, 

APEX Steering Group/APEX Control Staff, Intelligence Com- 
munity SIOs, appropriate APEX Security Officer(s) and APEX 
Control Officer(s), etc, as required). 

Provide explanation of the specific level of APEX access for 
which the person will be authorized access (e. g., operational 
compartment, subcompartment, product, APEX General Phase I/II). 

Cover its relationship to other information information 

processed by the US Government. 

Provide specific details of the APEX category ( ies ) , as 

appropriate to the person's duty assignment and as pro- 
vided by the appropriate APEX Program Manager. 

Show examples of the APEX material for which the person will be 
authorized and which fall within his/her nee d-to-know (adjust if 
APEX General Phase I access is involved). Ensure that differences 
between the various APEX categories are known and recognized. 

• — Explain the sensitivity of each APEX category for which the 
person will have access. 

Discuss the adverse effects on national security that could 

result from unauthorized disclosure of APEX information. 
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— Provide' APEX administrative security requirements: 

— — Access verification and certification. 

„ — pre-publication review responsibilities and procedures. 

SB I update requirement and personnel security reporting 

responsibilities and procedures. 

Review classification guides pertinent to the APEX ma- 
terial to which the person will have access. ( OPTIONAL ) 

Provide guidance on "portion marking" APEX material. 

Meaning/purpose of colored APEX coversheets. 

Inventory, certificate of destruction, and receipting 

procedures . 

■ "Two-person" rule. 

Discuss individual responsibilities: 

- No discussion of APEX information over non-secure 
telephones or in areas that are not accredited as 
an APEX Control Facility ( ACF ) . Advise location of 
secure phones and ACFs. 

- Discuss administrative reporting requirements and -pro- 
cedures : 

oo Unofficial foreign travel (DCID 1/20) 
oo Security violations and incidents 
oo Contacts with foreign nationals 

oo Attempts by unauthorized persons to obtain APEX 
information 

oo Possible loss or compromise of APEX material 

oo Personnel security concerns (i. e., excessive 

drinking; illegal use of drugs; sudden, unexplained, 
affluence, etc) 

Discuss requirements and procedures for couriering APEX 

materials 

— Discuss physical security requirements and procedures: 

"Define" an APEX Control Facility (ACF). 

Discuss levels of access held by ACEs and how to verify 

such levels. Cover how to establish or expand an ACE 
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Discuss general APEX 
men ts and the specif 
of the APEX material 


physical security storage require- 
ic storage and handling requirements 
the person will have access. 


Advise on how and where to report physical insecurities 
relating to APEX storage or handling. 


— Local procedures 


for APEX-indoctr inated visitors. 


"In-status" transfer procedures. (OPTIONAL) 


The need for, and frequency of, APEX reindoctrinations. 

— Responsibility and procedures for, and applicability of, 

debriefs from APEX access, 

— Individual classification management responsibilities; 

— General provisions of Executive Order 12065 and depart- 
mental or agency implementers . 

General provisions of Information Security Oversight 

Office (ISSO) Directive Number One. 

Discussion of specific classification/ compartmentation 

guides associated with the APEX material to which the 
person will have access. (Use Program Manager and other 
classification guides as source.) 

Classification challenges (rights and procedures). 

Specific decompartmentation and/or sanitization guide- 
lines associated with the APEX material to which the 
person will have access. (Use Program Manager and other 
guidelines as source.) 

Classification assignment responsibilities. 

-- Pre-existing Sensitive Compartmented Information (SCI): 

-Identify pre-existing SCI equating to the APEX material 

to which the person will have access. 

Advise general handling and storage procedures and 

restrictions for such material. 

Relationship of the material to APEX (e. g., sanitize or 

decompartment if possible; if not, then recontrol as 
APEX using applicable class if icat ion/decompartmen ..at. ion 
guides and threshold criteria) . 
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00 Direct any questions to the appropriate APEX Security 

01 or Control Officer, or alternates, 

02 

03 — Techniques used by foreign intelligence organizations to 

04 obtain classified information, 

05 

00 — - Reporting of attempts to obtain classified information. 

0 7 
0 8 

0 9 Conclusion Dr iefing ( pre sent e d at uncl ass i f ied l ev el) : 

10 ‘ " " : 

11 Penalties for espionage and unauthorized disclosure. 

12 

13 — Sanctions for violation or disregard of APEX security procedures,. 

14 

15 Persons/offices to contact whenever there is a question or con- 

16 cern regarding APEX security or procedures. 

17 

18 - — Signing of the APEX Nondisclosure Agreement ( N DA ) . 

1 9 

20 --- Explanation of legal obligations (Use legal instructional 

21 packet as source). 

2 2 

23 



y 
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APEX "MINI" BRIE FING 


(Combining the needs to introduce people into APEX with the 
need to limit information to the essential, level (i. e., persons 
to be given APEX General Phase I access and certain persons 
in industry) , the following "Mini" Briefing can be used at . 
the discretion of briefers who believe it will satisfy their 
requirements. ) 


— — The US Government/ in the interest of tightenting security, 
has requested that all access approvals on Special Projects 
be reviewed. It has also instituted new security procedures 
and new forms which will make security accountability a great 
deal easier. 


— The only immediate concern to you is the signing of the new 
form. Your security concerns remain the same; there is no 
change in your status on the job. Keep on with what you are 
doing, report any security concerns to your Security Officer 
(by name) and continue to protect the information you have 
been given. 


Approved For Release 2003/02/27 : CIA-RDP82M00591R000200050015-0 



00 
01 
02 
0 3 

04 

05 
0 6 

07 

08 
0 9 
10 
11 
12 

13 

14 

15 

16 

17 

18 

19 

20 
21 
22 

23 

24 
2 5 
26 

27 

28 

2 9 

3 0 

31 

32 

3 3 

34 

35 

36 

37 

38 

39 

40 

41 

42 

43 

44 

4 5 

46 

47 

48 

49 

50 

51 

52 

53 

54 

5 5 
56 
5 7 
5 8 

59 

60 


Api»v^g®rr§^S^eG20D3fl)2f27U GIAtRDPSQ IV r0B594^Cffl2OQOSOQ^lffi R "VIPs" 

(General Officers and other "VIPs" should be given specialized 
brief ings ,as their duties and responsibilities would not, for 
example, require detailed knowledge of "in-status" transfer pro- 
cedures or how to wrap material for ARFCOS delivery. The following 
is an outline of this type of APEX briefing.) 

Int roduct ion (presented at unclassified level) : 

General explanation of extreme sensitivity of the category of 
APEX information for which the person is being given access. 

Advisory that the person will be required to sign a contractual 
"Nondisclosure Agreement" (NDA) as a condition of access to APEX 
material. (Allow the person to read the NDA if applicable/asked.) 

— Highlight the NDA requirements for prepublication review and 
cover other matters as detailed in the legal instructional 
package on the NDA. 

-- Allow the individual to express any reservations which he/she 
may have concerning the NDA or access to APEX materials. (Such 
reservations could, in some cases, result in terminating the 
briefing at this point until issues are resolved.) 


Subs tan t ive Brie f ing_ (class ifi ed accor ding to c ontent) : 

— Abbreviated discussion of the need for, purpose of, and structure 
of the APEX Special Access Control System. (Use APEX Security 
Manual as source.) 

— Highlights of key aspects of the specific level of APEX access for 
which the person will be authorized access (e. g., operational 
compartment, subcompartment, product, or other). (Use Program 
Manager manuals as source.) 

— Office/person to contact for access verification and certifica- 
tion. 

— Individual responsibilities: 

■ No discussions of APEX information over non-secure telephones 

or in areas that are not accredited as an APEX Control 
Facility (ACF). Advise location of secure phones and ACEs. 

Administrative reporting requirements and procedures: 

- Unofficial foreign travel (DCID 1/20) 

- Security violations and incidents 

- Contacts with foreign nationals 

- Attempts by unauthorized persons to obtain APEX informa- 
tion 

- Possible loss or compromise of APEX material 
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0 0 -- Pre-publication review requirements and procedures. 

01 

02 -- Requirements and procedures for couriering APEX material. 

03 

04 General classification, decompartmentation and sanitization 

05 procedures and guidelines. (Use Program Manager manuals and 

06 guides as source.) 

0 7 

08 ---- Pre-existing SCI equating to APEX material to which the person 

09 will have access. 

10 
11 

12 Conclusion Briefing (presented at unclassified level): 

13 " ~ ' ’ 

14 — Discussion, as required, of the penalties for espionage and 

15 unauthorized disclosure. 

16 

17 ~~ Discussion, as required, of sanctions for violations or dis- 

18 regard of APEX security procedures. 

19 

20 -- Persons/offices to contact whenever there is a question or 

21 concern regarding APEX security or procedures. 

2 2 

23 — Signing of the APEX Nondisclosure Agreement ( N DA ) . 

2 4 

25 -- Explanation of legal obligations. (Use legal instructional 

26 packet as source.) 

27 
2 8 
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